CVE-2024-34990 | Help Desk Module up to 2.4.0 on PrestaShop replyTicket unrestricted upload

A vulnerability classified as critical was found in Help Desk Module up to 2.4.0 on PrestaShop. Affected by this vulnerability is the function HelpdeskHelpdeskModuleFrontController::submitTicket/HelpdeskHelpdeskModuleFrontController::replyTicket. The manipulation leads to unrestricted upload.

This vulnerability is known as CVE-2024-34990. The attack can be launched remotely. There is no exploit available.